Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68949
HistoryJun 20, 2022 - 12:00 a.m.

Student Registration and Fee Payment System SQL Injection Vulnerability

2022-06-2000:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
sql injection
student registration
fee payment system
vulnerability
data filtering
escaping
attack
sensitive data
database security

EPSS

0.001

Percentile

37.7%

Student Registration and Fee Payment System is a student registration and fee payment management system. student registration and fee payment system v1.0 is vulnerable to SQL injection, which originates from /scms/student. php is missing SQL data filtering and escaping. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.001

Percentile

37.7%

Related for CNVD-2022-68949